← Database

CVE-2007-0226

HIGH CVSS: 7.5 Published: 2007-01-13 Modified: 2026-06-16

Description

SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to execute arbitrary SQL commands via the "by User" field (aka the TXbyuser parameter).

Affected Platforms

Uniforum Uniforum

Weakness Type

NVD-CWE-Other

References